This is an automated email from the ASF dual-hosted git repository.

potiuk pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/airflow.git


The following commit(s) were added to refs/heads/main by this push:
     new 378e3581f31 Pin pnpm action to hash commit following best GH Action 
practices (#45547)
378e3581f31 is described below

commit 378e3581f31dfcc6dfa4661d07643ea07b2406bb
Author: Jarek Potiuk <[email protected]>
AuthorDate: Fri Jan 10 11:19:12 2025 +0100

    Pin pnpm action to hash commit following best GH Action practices (#45547)
    
    This was found by the CodeQL Actions scanning
---
 .github/workflows/basic-tests.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/basic-tests.yml 
b/.github/workflows/basic-tests.yml
index 353f65d9a6c..da803aee319 100644
--- a/.github/workflows/basic-tests.yml
+++ b/.github/workflows/basic-tests.yml
@@ -98,7 +98,7 @@ jobs:
       - name: "Cleanup docker"
         run: ./scripts/ci/cleanup_docker.sh
       - name: Setup pnpm
-        uses: pnpm/[email protected]
+        uses: pnpm/action-setup@fe02b34f77f8bc703788d5817da081398fad5dd2  # 
v4.0.0
         with:
           version: 9
           run_install: false

Reply via email to